General

  • Target

    88f6da211785d596af90571265f5cd62_JaffaCakes118

  • Size

    493KB

  • Sample

    241103-bvvmdszrbw

  • MD5

    88f6da211785d596af90571265f5cd62

  • SHA1

    999643fcbc76e120d2824b66d45d75bbb009a764

  • SHA256

    70dbf04d21096d4275b351c6209290e2f8b12299224ef26cefbe97579ca8d201

  • SHA512

    9924a2c7ac08a72ffaf7a69b4fd73d80cf7400bc2f5432d8d486c56129bfcd5092db0d6ff6aafca1346e582c50e77e05b3a0edf873e863d35c29b9be4b2b6354

  • SSDEEP

    6144:Y/MynBEM5cH+DFVLGwP0tcBm+6BOQ/ExOGavAku5wJUFdhLjTSdji7knGyHM:Y/MyBh5jFbvc1IQsxOGHkpJUF/PmiI

Malware Config

Extracted

Family

raccoon

Version

1.7.3

Botnet

83fbe81dd43f775dd8af3cd619f88f428fbd9a96

Attributes
  • url4cnc

    https://telete.in/opa4kiprivatem

rc4.plain
rc4.plain

Targets

    • Target

      88f6da211785d596af90571265f5cd62_JaffaCakes118

    • Size

      493KB

    • MD5

      88f6da211785d596af90571265f5cd62

    • SHA1

      999643fcbc76e120d2824b66d45d75bbb009a764

    • SHA256

      70dbf04d21096d4275b351c6209290e2f8b12299224ef26cefbe97579ca8d201

    • SHA512

      9924a2c7ac08a72ffaf7a69b4fd73d80cf7400bc2f5432d8d486c56129bfcd5092db0d6ff6aafca1346e582c50e77e05b3a0edf873e863d35c29b9be4b2b6354

    • SSDEEP

      6144:Y/MynBEM5cH+DFVLGwP0tcBm+6BOQ/ExOGavAku5wJUFdhLjTSdji7knGyHM:Y/MyBh5jFbvc1IQsxOGHkpJUF/PmiI

    • Raccoon

      Raccoon is an infostealer written in C++ and first seen in 2019.

    • Raccoon Stealer V1 payload

    • Raccoon family

MITRE ATT&CK Enterprise v15

Tasks